The "<domain>" could be in a form "domain.tld" or ".domain.tld", meaning "this domain only" or "this domain and any subdomains", or a special domain name "*" to indicate globally available protocols.
The array of access protocols could be empty indicating that these URI's are disallowed, or list protocols and optionally ports allowed to access. Default ports are considered allowed, if no port is specified.